Trust.ID Talk

The episode is largely introductory - defining SPF, DKIM, DMARC, and BIMI for a lay audience - with only a handful of mildly substantive points such as the CMC/VMC distinction and the upcoming DKIM2 and DMARC 2.0 protocols. A B2B operator with any prior exposure to email security would learn little here.

“There's a new version of DKIM coming out called DKIM2 which offers some enhancements over the existing DKIM protocol. There's a new uh, version of DMARC coming on. We're still on version 1.0”

“email authentication has always been a best practice as long as that's been around. But it was never a formal requirement until a couple years ago”

The episode recycles standard cybersecurity talking points without any contrarian or first-principles framing. The 'attackers only have to be right once' line is one of the most overused phrases in all of security commentary, and the social-media verified-tick analogy for BIMI is a well-worn explanatory device in the space.

“The attackers only have to be right once. Defenders have to be right right all the time”

“it's always an arms race. Attackers try new tactics, defenders try to keep up with those”

Brian Westnedge is a genuine practitioner in the email authentication space and demonstrates working knowledge of the protocols, but the episode functions essentially as a GlobalSign/Redshift vendor promotional conversation rather than an independent expert interview, which limits the candour and depth of the perspective offered.

“for us in the space that GlobalSign Reds have worked in, that's uh, email authentication, specifically SPF, DKIM and DMARC protocols”

“obtaining the common mark certificate from GlobalSign is a fairly straightforward process as well”

The guest names a handful of real mailbox providers and references upcoming protocol versions, but there are zero metrics, adoption figures, breach statistics, timelines, or dollar figures anywhere in the episode. 'Educational institutions, universities, state and local government' as examples of implementers is vague to the point of being meaningless.

“big mailbox providers like Google, Microsoft and Yahoo all came out with sender requirements for domain owners”

“The elephant in the room is Microsoft. So we expect Microsoft to adopt bimi. They have not yet”

The host asks almost exclusively definitional 'can you explain X?' questions with no follow-up pressure, no numerical challenges, and no attempt to probe edge cases or push back on vendor framing. The episode closes with an off-topic 'favourite tech' question that actively wastes time.

“So maybe if we just take a little kind of step back for a second and kind of just have a little talk about some of the elements of kind of DMARC encryption”

“what one piece of tech could you not live without and don't see email?”